Should be added to exclude to not match TYPO3 CMS on forge.typo3.org (not a TYPO3 CMS).

Otherwise, the other solution would to remove the Dectection "headers": {"Set-Cookie": "fe_typo_user"}, that is not the best indicators. Indeed, if the domain is the same of a TYPO3 CMS website the fe_typo_user is present.